CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2015-8318 HIGH
Huawei P8 <GRA-TL00C01B230 - Buffer Overflow
CVSS 7.8
CVE-2015-6312 HIGH
Dell Emc Powerscale Onefs < 2017-01-06 - Memory Corruption
CVSS 7.5
CVE-2015-8522 CRITICAL
IBM Tivoli Storage Manager FastBack <6.1.12.2 - RCE
CVSS 9.8
CVE-2015-8521 CRITICAL
IBM Tivoli Storage Manager FastBack <6.1.12.2 - RCE
CVSS 9.8
CVE-2015-8520 CRITICAL
IBM Tivoli Storage Manager FastBack <6.1.12.2 - RCE
CVSS 9.8
CVE-2015-8519 CRITICAL
IBM Tivoli Storage Manager FastBack <6.1.12.2 - RCE
CVSS 9.8
CVE-2015-8837 HIGH
FuseISO < 20070708 - Stack-Based Buffer Overflow via Long ISO Pathname
CVSS 7.3
CVE-2015-8836 HIGH
Fedora < 20070708 - Memory Corruption
CVSS 7.3
CVE-2015-8277 CRITICAL
Flexera FlexNet Publisher <11.13.1.2 - Buffer Overflow
CVSS 9.8
CVE-2015-8149 HIGH
Symantec Encryption Management Server <3.3.2 - DoS
CVSS 7.5
CVE-2015-7547 HIGH
GNU C Library <2.23 - Buffer Overflow
CVSS 8.1
CVE-2015-8773 HIGH
McAfee File Lock 5.x - Denial of Service via Long Vault GUID in ioctl Call
CVSS 7.5
CVE-2015-8792 MEDIUM
libmatroska < 1.4.4 - Heap Memory Information Disclosure via Crafted EBML Lacing
CVSS 5.3
CVE-2015-7909 HIGH
Hospira Communication Engine < 1.2 - Stack-based Buffer Overflow via TCP Port 5000
CVSS 7.3
CVE-2015-8472 HIGH
libpng <1.0.65, 1.1.x, 1.2.x <1.2.55, 1.3.x, 1.4.x <1.4.18, 1.5.x <...
CVSS 7.3
CVE-2015-5295 MEDIUM
OpenStack Orchestration API < 2015.1.3 and 5.0.0-5.0.1 - Authenticated Denial of Service via Template Resource Type
CVSS 5.4
CVE-2015-5590 HIGH
PHP <5.4.43, <5.5.27, <5.6.11 - Buffer Overflow
CVSS 7.3
CVE-2015-8659 CRITICAL
Apple Mac OS X < 10.11.3 - Memory Corruption
CVSS 10.0
CVE-2015-8306 HIGH
Huawei P8 Firmware - Buffer Overflow in HIFI Driver
CVSS 7.8
CVE-2015-8098 CRITICAL
F5 BIG-IP APM <11.4.1 HF9, 11.5.x <11.5.3, 11.6.0 <11.6.0 HF4 - RCE...
CVSS 9.8
CVE-2015-8088 HIGH
Huawei P8 and Mate 7 Firmware - Heap-Based Buffer Overflow in HIFI Driver
CVSS 7.8
CVE-2015-7116 MEDIUM
tvOS < 9.1 - Memory Corruption via Crafted XML Document
CVSS 4.3
CVE-2015-7115 MEDIUM
Apple iOS <9.2, macOS <10.11.2, tvOS <9.1 - Memory Corruption via Crafted XML Document
CVSS 4.3
CVE-2015-7939 CRITICAL
Unitronics VisiLogic OPLC IDE <9.8.09 - Buffer Overflow
CVSS 9.6
CVE-2015-7117 MEDIUM
Apple QuickTime < 7.7.8 - Remote Code Execution via Crafted Movie File
CVSS 6.6
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits